$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa File: 733814ea-3460-36b3-964e-555b6261ca95.roa (raw, json) Hash identifier: NaIAd7pSvwIF4ZKIxyiMyPu6njjpnJn+nrLjmHAtfYs= Subject key identifier: 90:25:C4:15:72:D0:13:2C:E4:12:0F:4F:2D:BA:65:4D:1B:02:52:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACD955AA3D13E7D2AECE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cd:95:5a:a3:d1:3e:7d:2a:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d5f4c29-38a7-44e8-8e4e-d48b279b9079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:78:cc:22:8b:84:a6:36:c3:b5:b7:3f:06: 27:5e:e2:49:fc:30:16:f7:f7:50:bd:04:b7:7b:74: 72:23:7e:c9:1f:82:c8:80:c0:4f:50:07:5a:22:db: c5:c6:f7:f2:4d:d2:3b:0f:d9:1f:d4:f7:5d:a8:5d: 81:7d:9b:92:32:53:9c:07:fc:84:50:fa:a3:ee:b9: a7:54:e0:16:e3:3b:14:d4:0d:89:82:6a:36:65:ef: 6f:06:1c:f2:29:2d:bc:be:bb:40:c7:79:12:a1:5e: 9b:c8:2b:8f:a8:49:ba:c2:ea:61:06:4b:4f:c4:a3: 2f:f1:53:31:27:c7:6d:00:54:19:9e:6f:54:ed:08: cc:7b:d3:43:d9:b1:47:b2:c4:14:34:ba:1a:66:60: a7:d5:3f:63:5a:c6:62:c7:73:91:9d:c5:23:96:42: bf:16:d5:35:24:5f:e9:a9:b1:b2:92:71:d4:2d:2d: 0b:13:85:b6:00:52:9e:52:32:43:69:15:fd:a2:57: 44:8c:26:be:f8:9d:90:97:cf:75:8b:57:0b:11:1c: 37:1d:d7:0f:77:dd:81:10:de:3c:50:03:8a:2e:17: d6:7d:f8:72:0f:c9:62:c6:74:ce:df:b1:63:f4:0d: 0e:0e:38:ce:07:0b:89:db:68:ec:0c:55:a6:00:42: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:C4:15:72:D0:13:2C:E4:12:0F:4F:2D:BA:65:4D:1B:02:52:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:73:9d:66:55:f5:ac:f2:b4:c5:18:2b:88:c5:1e:56:f2:7c: 94:8b:f5:cd:9f:7e:f8:d4:21:35:17:46:db:4b:3c:af:ef:c3: 2e:c3:3b:22:37:02:d9:15:84:6c:bc:b7:0b:ec:94:ce:ea:e7: 97:1b:95:76:d8:e1:6a:8c:7e:83:71:f7:92:f9:91:38:23:7c: 22:85:12:63:44:d1:27:ad:9d:20:fa:02:70:6a:f1:a1:91:43: 15:78:a7:f9:d0:c3:f0:ac:d8:01:3a:3b:22:06:47:b8:b0:d5: 81:af:1b:b1:d1:c8:31:a8:8c:28:be:fa:53:af:7e:e7:d2:df: 1b:50:13:34:19:26:5b:6f:29:73:3c:b1:11:3d:fc:4b:98:fa: 3e:44:5c:84:92:27:62:d2:26:c4:bf:4f:25:33:e0:6d:9e:dc: da:a3:62:dd:81:c3:56:42:c6:d3:df:9c:09:73:8d:6e:4a:6c: 26:99:cd:a6:0c:2d:3f:21:dd:0d:57:78:8e:b4:01:47:ac:f9: 35:37:ea:7a:38:21:8b:de:71:ff:e8:f0:fc:2c:a4:05:07:ce: 4c:c7:a4:28:4f:55:48:36:ab:eb:b8:df:f9:59:dc:36:7f:7b: 44:b6:05:51:0c:06:94:a4:93:7e:c4:6f:e2:ba:27:72:e6:fb: 64:f9:72:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus2VWqPRPn0q7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q1ZjRjMjktMzhhNy00NGU4LThlNGUtZDQ4YjI3OWI5MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnd4zCKLhKY2w7W3PwYnXuJJ/DAW9/dQvQS3 e3RyI37JH4LIgMBPUAdaItvFxvfyTdI7D9kf1PddqF2BfZuSMlOcB/yEUPqj7rmn VOAW4zsU1A2Jgmo2Ze9vBhzyKS28vrtAx3kSoV6byCuPqEm6wuphBktPxKMv8VMx J8dtAFQZnm9U7QjMe9ND2bFHssQUNLoaZmCn1T9jWsZix3ORncUjlkK/FtU1JF/p qbGyknHULS0LE4W2AFKeUjJDaRX9oldEjCa++J2Ql891i1cLERw3HdcPd92BEN48 UAOKLhfWffhyD8lixnTO37Fj9A0ODjjOBwuJ22jsDFWmAEJBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAlxBVy0BMs5BIPTy26ZU0bAlKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzMzODE0ZWEtMzQ2MC0z NmIzLTk2NGUtNTU1YjYyNjFjYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFznWZV9azytMUYK4jFHlbyfJSL9c2ffvjUITUXRttLPK/vwy7DOyI3 AtkVhGy8twvslM7q55cblXbY4WqMfoNx95L5kTgjfCKFEmNE0SetnSD6AnBq8aGR QxV4p/nQw/Cs2AE6OyIGR7iw1YGvG7HRyDGojCi++lOvfufS3xtQEzQZJltvKXM8 sRE9/EuY+j5EXISSJ2LSJsS/TyUz4G2e3NqjYt2Bw1ZCxtPfnAlzjW5KbCaZzaYM LT8h3Q1XeI60AUes+TU36no4IYvecf/o8PwspAUHzkzHpChPVUg2q+u43/lZ3DZ/ e0S2BVEMBpSkk37Eb+K6J3Lm+2T5cmo= -----END CERTIFICATE-----Generated at Sun May 4 11:27:38 2025 by rpki-client